aboutsummaryrefslogtreecommitdiffstats
path: root/core
diff options
context:
space:
mode:
authorKim Alvefur <zash@zash.se>2021-04-26 15:32:05 +0200
committerKim Alvefur <zash@zash.se>2021-04-26 15:32:05 +0200
commitb369dea3d885a0a5efe882f75f5e90704cb95e87 (patch)
tree1fb141839d0d96671a14f6d2cea7c759d6e9ff85 /core
parenta174420e52cdbc0c80680d76c750d0ac59c01870 (diff)
downloadprosody-b369dea3d885a0a5efe882f75f5e90704cb95e87.tar.gz
prosody-b369dea3d885a0a5efe882f75f5e90704cb95e87.zip
core.certmanager: Test for SSL options in absence of LuaSec config
Diffstat (limited to 'core')
-rw-r--r--core/certmanager.lua14
1 files changed, 9 insertions, 5 deletions
diff --git a/core/certmanager.lua b/core/certmanager.lua
index 85a24d3d..b0c7039d 100644
--- a/core/certmanager.lua
+++ b/core/certmanager.lua
@@ -36,6 +36,10 @@ local prosody = prosody;
local resolve_path = require"util.paths".resolve_relative_path;
local config_path = prosody.paths.config or ".";
+local function test_option(option)
+ return not not ssl_newcontext({mode="server",protocol="sslv23",options={ option }});
+end
+
local luasec_major, luasec_minor = ssl._VERSION:match("^(%d+)%.(%d+)");
local luasec_version = tonumber(luasec_major) * 100 + tonumber(luasec_minor);
local luasec_has = ssl.config or softreq"ssl.config" or {
@@ -46,11 +50,11 @@ local luasec_has = ssl.config or softreq"ssl.config" or {
curves_list = luasec_version >= 7;
};
options = {
- cipher_server_preference = luasec_version >= 2;
- no_ticket = luasec_version >= 4;
- no_compression = luasec_version >= 5;
- single_dh_use = luasec_version >= 2;
- single_ecdh_use = luasec_version >= 2;
+ cipher_server_preference = test_option("cipher_server_preference");
+ no_ticket = test_option("no_ticket");
+ no_compression = test_option("no_compression");
+ single_dh_use = test_option("single_dh_use");
+ single_ecdh_use = test_option("single_ecdh_use");
};
};